Scams going around · Text messages
Reward points expiring text scam
Pretends to be a rewards program you belong to. A text says your reward points expire today. It tells you to tap a link to save them. The link leads to a fake page. It tries to get your password, credit card number or Social Security number. Or the link may put harmful software on your phone.
An example of what it can look like
Not a real message: the details are made up.
(469) 555-0182
Rewards Alert: Your 24,850 points expire TODAY at 11:59 PM. Sign in now to save them and claim your reward: points-rewards-center.example
How to tell
- It says your points expire today, so you must act right now.
- It gives you a link to tap to save your points.
- The page it links to asks you to sign in, or asks for a card number or Social Security number.
- You were not expecting it. Real companies won't ask for your account information by text.
What to do
- Don't tap the link in the text.
- Open the company's app, or type its website address yourself, and check your points there.
- Never type your username or password on a page you reached from a text.
- Turn on your phone's spam filter, if it has one. It is a setting that cuts down on junk texts. Your cell phone company may also have a tool that blocks unwanted texts.
- Keep your phone's software up to date. Updates often include protections that can help if you ever tap a scam link by accident.
If you already tapped, paid, called or replied
- Stop. Close the page and don't type anything more.
- If you typed a password, change it in the company's real app or website. Change it anywhere else you use the same one.
- If you see a charge you didn't make on a credit or debit card, tell your card company or bank right away. Call the number on the back of your card, or sign in through its own website or app.
- If you gave a credit card, debit card or bank account number, go to IdentityTheft.gov. It shows the steps to take for the information you gave.
- If someone has used your Social Security number, report it at IdentityTheft.gov. If it hasn't been used, or you aren't sure, go to IdentityTheft.gov/databreach.
How to check for real
Open the company's app, or type its website address yourself, and check whether your points are really expiring. You can also call the company using a phone number you know is real, not one from the text.
Where to report it
- Forward the text to 7726 (SPAM). This helps your cell phone company block similar texts.
- Use the report junk or report spam option in your texting app.
- Report it to the FTC at ReportFraud.ftc.gov.
Free guides that go with this
Check a message you got, free · Check a link
Where this comes from
Written from these official warnings, checked 2026-09-25. Lantern is not part of any organization named on this page.